System UIDs/GIDs in RHEL7 (UNCLASSIFIED)

Shawn Wells shawn at redhat.com
Wed Jan 8 18:40:51 UTC 2014


On 1/8/14, 1:28 PM, Steve Grubb wrote:
> On Wednesday, January 08, 2014 03:51:58 PM Shaw, Ray V CTR USARMY ARL wrote:
>> >Classification: UNCLASSIFIED
>> >Caveats: NONE
>> >
>> >https://lists.fedoraproject.org/pipermail/devel/2011-May/151663.html
>> >
>> >Will UID_MIN and GID_MIN default to 1000 in RHEL7 as well?
> Yes.
>
>> >I have not had
>> >(and do not have, sadly) time to check out the RHEL7 beta, but a quick
>> >search of several of the documentation pages didn't mention this.  I would
>> >imagine so, given things like:
>> >
>> >https://bugzilla.redhat.com/show_bug.cgi?id=907312
>> >
>> >If so, should we expect the STIG for RHEL7 to reflect this, counting
>> >everything 1000 and below as a "system" account/group for relevant rules?
>> >Just trying to get a head start on potentially necessary UID/GID changes.
> It should be adjusted to this new boundary if its not already fixed.

It's on the list. A number of things will need to be updated (audit 
rules, account creation guidance, etc).


More information about the scap-security-guide mailing list